Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf7a2331-48e1-3b80-96a9-14c8f2f5e637.roa
File:                     cf7a2331-48e1-3b80-96a9-14c8f2f5e637.roa (raw, json)
Hash identifier:          dDeFWhh/da+hF7+C52RFpzJ/tMhI5dID0IMZrBrcV3g=
Subject key identifier:   38:CB:0B:02:6A:3A:E1:33:53:9B:37:2D:2C:F6:D3:64:6A:71:C7:74
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F89B308
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf7a2331-48e1-3b80-96a9-14c8f2f5e637.roa
Signing time:             Mon 30 Sep 2019 00:19:53 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     17330
IP address blocks:        165.254.90.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:89:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=fb42332b-acb3-4de8-8e3b-196ea5378f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:e8:97:2d:ee:6f:36:77:21:e9:16:3d:a9:
                    46:68:c0:4b:4e:f8:66:74:62:ea:2e:dc:d7:81:5b:
                    91:0d:31:c1:d9:ed:35:5f:ea:5d:d4:7e:d6:26:4b:
                    d3:73:23:14:60:69:ca:4d:a8:ec:0d:69:e2:6c:7c:
                    a0:3d:c3:9c:86:ca:7d:ee:41:f7:dc:eb:f1:b6:ef:
                    fd:30:93:bf:d1:1d:aa:85:fd:77:b4:ef:94:78:96:
                    db:50:a1:45:ab:34:e5:57:24:a9:10:bc:b1:50:0a:
                    f2:b1:fd:16:8d:9b:16:82:75:9e:9f:8e:2f:b4:c5:
                    d3:27:52:69:4b:95:2a:0d:cd:27:f5:61:61:24:c6:
                    ab:92:6b:0a:51:97:df:79:a5:e3:fd:66:64:06:19:
                    3e:80:3e:1d:85:49:ce:ca:99:3e:80:59:b2:e7:84:
                    8f:94:a4:62:82:64:74:7f:1d:c3:da:54:f6:70:3c:
                    2d:ef:6c:5d:4b:a3:76:69:29:32:20:66:1d:d0:e2:
                    ef:ac:6d:84:66:e6:17:f0:45:11:d9:c1:c1:c5:57:
                    41:2d:09:f6:33:bc:75:29:6b:c3:9a:f0:e7:91:81:
                    d2:3c:6b:da:bb:71:da:07:67:89:a6:d6:1a:07:33:
                    6e:84:7d:42:db:51:37:92:3f:a8:ef:62:e1:a8:50:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:0B:02:6A:3A:E1:33:53:9B:37:2D:2C:F6:D3:64:6A:71:C7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf7a2331-48e1-3b80-96a9-14c8f2f5e637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:bd:89:09:25:f7:02:cc:d6:15:3b:81:a1:91:ac:6b:80:
         4d:03:e4:c5:89:a9:82:84:65:cc:bf:f5:dd:87:b8:df:60:e9:
         79:94:e8:f9:ca:92:5a:ea:12:5e:3b:12:56:1e:8c:74:22:fe:
         2d:db:27:91:4c:0f:e5:88:69:55:9c:38:63:6d:05:8c:0f:27:
         43:28:0f:27:90:af:29:d1:4d:37:da:8a:f1:9f:85:bb:79:c3:
         bb:48:ba:7c:ef:ce:ee:0e:61:6b:d4:45:d8:f7:03:1e:88:3f:
         50:63:c6:f4:ff:7a:aa:b6:b6:97:ea:5d:af:bd:17:d3:19:4a:
         76:ca:8b:73:ff:4b:3d:41:2c:26:05:d6:f9:ad:b5:35:61:fc:
         47:e9:2f:48:18:45:84:69:68:bf:eb:17:e8:46:61:3d:a2:99:
         07:92:fc:c8:64:c7:3a:af:d1:72:4e:3c:b4:5d:56:27:a2:07:
         30:23:f7:18:06:ee:e8:cf:db:f4:01:c1:ee:b9:0c:c1:0f:13:
         ed:33:9f:e3:68:02:cd:3d:96:85:45:a8:44:dd:b8:d2:cf:8d:
         c7:1e:df:8a:ae:30:df:dc:4f:f5:b6:93:06:a0:59:fc:07:87:
         86:a2:34:16:c5:48:0e:68:37:bd:cd:80:83:de:89:5b:aa:fc:
         71:0e:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----